high85%
Safari CORS preflight failure due to missing Access-Control-Allow-Headers for supabase-js custom headers
Safari intermittently fails to fetch Supabase API endpoints because the CORS preflight response does not include the 'accept-profile' header (and possibly other custom headers) in Access-Control-Allow-Headers, causing the browser to reject the request with 'access control checks' errors.